Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft
File: tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json)
Hash identifier: 2FlH6I9clZ61PNWFrv6sQZG0s608V238o3qz6W5exeU=
Subject key identifier: D5:5D:E3:5D:18:47:73:CA:32:D0:63:18:BF:DA:49:84:85:7B:1C:64
Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29
Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429
Certificate serial: 08CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft
Manifest number: 1F46
Signing time: Fri 31 Jan 2025 16:41:18 +0000
Manifest this update: Fri 31 Jan 2025 16:41:18 +0000
Manifest next update: Fri 07 Feb 2025 16:41:18 +0000
Files and hashes: 1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: 3Ap6ppl+w4BH5s/0X366AUOZkSyVmaKhJeyBIzYs6rs=)
2: 3D13A01EA9AB11EAA4DBEA5EC4F9AE02.roa (hash: /rJ72nX+kkgSo0V45R+mQxQnHh38w+ytfp+FOoflTT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429
Validity
Not Before: Jan 31 16:41:18 2025 GMT
Not After : Feb 7 16:41:18 2025 GMT
Subject: CN=679cfd2e-fb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:ff:5b:51:c0:c2:10:ab:b9:11:dc:91:1f:
e1:96:5f:4e:e4:ae:f8:87:c6:57:af:4d:a1:49:ea:
47:93:99:42:29:1f:cc:78:a6:48:88:23:cb:c7:f5:
e7:d1:42:d1:b3:45:de:84:1b:1d:54:33:f8:1a:e8:
1c:ee:19:c4:3f:2f:5d:a1:0d:09:f4:58:cb:23:9a:
0b:d3:74:23:fe:a7:19:67:74:0d:01:81:88:40:9a:
3c:8c:a1:63:2b:93:aa:1f:ef:c3:18:e4:df:0b:98:
bc:b9:37:f1:f0:2f:58:69:17:28:bd:64:90:e0:26:
89:03:fc:5e:c8:d3:71:f2:36:dd:80:c6:b6:ee:58:
ef:dc:96:7d:33:fa:ce:1a:60:a4:27:13:aa:ab:d8:
82:a3:6e:51:d2:15:5b:97:bc:cf:e6:24:3e:f2:f3:
b0:2f:f5:27:b2:12:25:47:b9:40:ea:92:34:b0:56:
11:4d:90:ee:2a:b2:60:42:27:81:f4:09:67:a3:31:
be:c8:ec:0e:16:b8:29:b2:66:d9:8c:bc:2f:f7:8b:
a1:c7:7d:09:a1:bb:aa:40:52:06:ff:6d:9c:39:4f:
00:2f:0e:80:ef:72:43:c4:d5:d2:e6:04:3e:d6:1f:
23:2b:34:c4:29:0a:7c:89:b8:65:e8:64:94:ad:6f:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:E3:5D:18:47:73:CA:32:D0:63:18:BF:DA:49:84:85:7B:1C:64
X509v3 Authority Key Identifier:
keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:81:37:fe:91:0f:58:19:78:cb:fc:d6:92:68:80:24:33:60:
af:ee:d5:93:f2:39:24:20:ca:14:e5:81:3d:d8:0a:bb:18:8e:
03:49:f4:09:7f:98:68:65:d1:f3:6f:ed:16:a4:5f:2f:08:33:
fd:90:63:b8:36:10:a5:fa:8c:05:ef:d5:2f:2b:08:7f:c3:de:
fc:5f:f5:5b:15:cf:70:06:ed:9c:87:e4:3f:a9:ec:ed:b1:6c:
2d:f2:44:0b:f6:b3:4b:25:56:fc:f0:0e:e2:ef:2d:ed:0d:53:
2f:e5:ca:18:5a:40:37:8f:28:e0:f7:b6:4b:d1:5b:a1:5c:9b:
3a:5f:10:64:62:7f:ea:21:6a:b9:11:f8:64:0c:a6:c9:85:f1:
f3:1b:6f:e7:bd:b7:6d:1e:67:f9:59:19:50:81:1c:37:ce:aa:
f7:a4:8d:75:b8:13:77:24:1d:0a:f5:6e:3b:0d:49:4f:df:e6:
53:86:bb:af:66:b4:c7:48:ba:46:dc:d1:4d:05:3c:cd:cc:8d:
b5:23:e1:0f:d0:fb:c8:0c:e9:c6:12:a7:0d:37:65:f1:5d:0e:
d8:63:ae:c0:91:b2:34:9c:ca:24:e3:12:50:2d:e4:43:4c:0b:
62:0b:a9:b0:f5:49:06:0b:0f:10:25:6e:62:c3:27:b8:0f:85:
9e:2a:45:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz
Q0FGQjM0MjkwHhcNMjUwMTMxMTY0MTE4WhcNMjUwMjA3MTY0MTE4WjAYMRYwFAYD
VQQDEw02NzljZmQyZS1mYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPn/W1HAwhCruRHckR/hll9O5K74h8ZXr02hSepHk5lCKR/MeKZIiCPLx/Xn
0ULRs0XehBsdVDP4Gugc7hnEPy9doQ0J9FjLI5oL03Qj/qcZZ3QNAYGIQJo8jKFj
K5OqH+/DGOTfC5i8uTfx8C9YaRcovWSQ4CaJA/xeyNNx8jbdgMa27ljv3JZ9M/rO
GmCkJxOqq9iCo25R0hVbl7zP5iQ+8vOwL/UnshIlR7lA6pI0sFYRTZDuKrJgQieB
9AlnozG+yOwOFrgpsmbZjLwv94uhx30JobuqQFIG/22cOU8ALw6A73JDxNXS5gQ+
1h8jKzTEKQp8ibhl6GSUrW/S9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVd410Y
R3PKMtBjGL/aSYSFexxkMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2
MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklM
TWx2QW5FdjB5dDg4cjdOQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAgTf+kQ9YGXjL/NaSaIAkM2Cv7tWT8jkkIMoU5YE92Aq7GI4DSfQJ
f5hoZdHzb+0WpF8vCDP9kGO4NhCl+owF79UvKwh/w978X/VbFc9wBu2ch+Q/qezt
sWwt8kQL9rNLJVb88A7i7y3tDVMv5coYWkA3jyjg97ZL0VuhXJs6XxBkYn/qIWq5
EfhkDKbJhfHzG2/nvbdtHmf5WRlQgRw3zqr3pI11uBN3JB0K9W47DUlP3+ZThruv
ZrTHSLpG3NFNBTzNzI21I+EP0PvIDOnGEqcNN2XxXQ7YY67AkbI0nMok4xJQLeRD
TAtiC6mw9UkGCw8QJW5iwye4D4WeKkXY
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:44 2025 by rpki-client